Privacy Policy
Last updated: 11 November 2026
The short version
- We collect as little as we can: your Discord ID, name and avatar so people know who they're playing, and a record of the matches you play.
- We never get your email address (unless you email us or buy on our website), your messages, your voice, your friends list or your card details.
- No adverts, no tracking, and we don't sell personal data.
- Match records are deleted automatically after 12 months.
- To see, correct or delete what we hold about you, email [email protected].
1. Who we are
Soulscale: Purgatory ("Soulscale" or "the game") is a card game you play inside Discord. It is made and run by whispr.dev ("we", "us", "our"), based in the United Kingdom.
We are the controller of the personal data described here. That means we decide how it's used and we're responsible for looking after it under the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and, for players in the European Economic Area, the EU GDPR.
This policy covers the game (inside Discord and in a web browser) and the website at soulscale.store. Discord's own handling of your data is covered by Discord's Privacy Policy.
2. What we collect and why
2.1 When you open Soulscale in Discord
The first time you launch Soulscale, Discord asks whether you want to authorise it. If you agree, Discord gives us:
- your Discord user ID, username and display name;
- your avatar (a link to your profile picture on Discord's servers);
- the ID of the Activity session you opened, so we can seat you at the same table as the other people in your call or channel.
We only ask Discord for the identify permission, plus applications.commands, which lets Discord show Soulscale's Launch button. We don't ask for, and don't receive, your email address, messages, voice, server list or friends list.
Why: to show who is at the table and run the game you asked to play. Legal basis: performing our agreement with you (our Terms of Service).
While you're connected, your name, ID and avatar are held in our server's memory. We don't store them in a database or keep them after you leave.
2.2 While you play
- Your moves: the cards you play, where and how you play them, dice rerolls, the deck you use and the result. Everyone at your table, including spectators, sees your name, avatar and plays as the game reveals them.
- Match records: when a match ends, our server saves a written log, a round-by-round spreadsheet and a replay file. These contain both players' display names, the decks used (including names you give your own decks), every move and the result. They do not contain Discord user IDs.
Why: to investigate bug reports and cheating, and to balance the game. Legal basis: our legitimate interests in keeping the game fair and working. You can object to this. See your rights.
2.3 Kept on your device, not by us
The game saves your settings (volume, game speed, display options), the decks you build in the Deck Builder and any changes you make in the Sound Lab in your browser's local storage, on your own device. We don't receive these, except that a custom deck you play with becomes part of that match's record. You can delete decks in the Deck Builder, or clear everything by clearing the site's stored data.
We don't use cookies, advertising IDs or analytics tools.
2.4 Technical data
Inside Discord, the game reaches our server through Discord's own proxy, so we normally see Discord's network addresses rather than yours. Our server keeps a short technical log of connections, errors and Activity session IDs to keep the service running and secure. This log doesn't contain names or Discord IDs and is rotated automatically.
If you visit soulscale.store directly in a browser, our web server uses your IP address to send you the page. We don't keep logs of these visits.
Legal basis: our legitimate interests in running a secure, reliable service.
2.5 When you contact us
If you email us, we'll have your email address and anything you include in your message. We use it to answer you and sort out your request. Legal basis: our legitimate interests in supporting players, or our agreement with you if it's about something you bought.
3. When the card shop opens
Soulscale is free to play and has nothing for sale yet. We plan to sell collectable cards and card packs. This section explains what will happen then. We'll update this policy and tell you in the game before anything goes on sale.
- Your collection: which cards and packs you own, how you got each one (bought, earned, opened from a pack or traded) and your trade history: who traded what with whom, and when. Why: to give you what you bought, to run trading, and to stop fraud and scams. Legal basis: our agreement with you; our legitimate interests in preventing fraud.
- Buying through Discord: Discord takes the payment and handles your payment details. Discord tells us what you bought: the item, your Discord user ID, when you bought it, and whether it has been used or refunded. Discord's Privacy Policy and Paid Services Terms cover the payment.
- Buying on soulscale.store through Stripe: Stripe takes the payment. We receive your email address (for your receipt), your country (for tax), what you bought, the amount, and Stripe's payment reference. We never see your full card number. To deliver web purchases to your collection, you'll sign in to the store with Discord, which gives us the same details as in section 2.1. Stripe also uses payment data to prevent fraud, as a separate controller under Stripe's Privacy Policy.
- Purchase records: kept because UK tax law requires them. Legal basis: legal obligation.
- Parental permission: if a parent or guardian contacts us about a purchase a young player made without permission, we'll use what they tell us to put it right.
4. Who we share it with
We don't sell personal data, and we don't share it with advertisers or data brokers.
- Other players at your table see your Discord name, avatar and plays.
- Discord runs the platform the game lives on. When the shop opens, Discord also processes purchases made inside Discord.
- DigitalOcean hosts our server in New York, USA. It acts only on our instructions, under a data processing agreement.
- Stripe will process payments on soulscale.store once the shop opens.
- Authorities or other parties, if the law requires it, or where it's needed to protect someone's safety or to deal with fraud.
- A new owner, if Soulscale is ever sold or transferred. They'd have to respect this policy, and we'd tell you first.
5. Data sent abroad
Our server is in the USA, and Discord and Stripe process data in the USA and elsewhere. When personal data goes from the UK or the EEA to these providers, it's protected by safeguards that UK and EU law accept. Examples are the UK International Data Transfer Addendum or EU Standard Contractual Clauses in the provider's data processing terms, or the UK–US "data bridge" where the provider is certified to it. Email us if you'd like details.
6. How long we keep it
| What | How long |
|---|---|
| Discord ID, name and avatar | Only while you're connected. Not stored after you leave. |
| Match records (logs, spreadsheets, replays) | 12 months, then deleted automatically |
| Server technical log | Rotated automatically. Contains no names or Discord IDs. |
| Emails to support | Up to 2 years after your request is closed |
| Your collection and trade history (once the shop opens) | While you have items in Soulscale. Deleted within 30 days if you ask us to delete your account (you'll lose the items). |
| Purchase records (once the shop opens) | 6 years from the end of the tax year of the purchase, as UK tax law requires |
7. Your rights
Under data protection law you have the right to:
- see the personal data we hold about you and get a copy;
- have it corrected if it's wrong;
- have it deleted;
- restrict how we use it, or object to us using it where we rely on legitimate interests;
- get it in a portable, machine-readable form (portability);
- withdraw consent, where we've asked for it.
To use any of these, email [email protected] with your Discord username. We may ask you to prove the account is yours before acting. We reply within one month. If a request is complicated, that can be extended by up to two more months, and we'll tell you if so. It's normally free.
You can also stop Soulscale getting your Discord details at any time: in Discord, open User Settings → Authorized Apps and remove Soulscale.
If you're unhappy with how we've handled your data, please tell us first so we can try to fix it. You can also complain to the UK Information Commissioner's Office at ico.org.uk (0303 123 1113), or to the data protection authority where you live.
Wherever you live, you can use these same routes and we'll honour your request.
8. Children and young players
Discord requires users to be at least 13, or older where local law sets a higher age. Soulscale has the same minimum. It isn't meant for children under 13, and if we learn we hold data about one, we delete it.
Many players are teenagers, so we follow the spirit of the UK Information Commissioner's Children's Code. There are no adverts, no profiling and no location data, and nothing about you is shown to anyone except your name and avatar at the game table. When the shop opens, players under 18 will need a parent's or guardian's permission to buy anything (see the Terms of Service).
9. Security
Everything between the game and our server is encrypted (HTTPS). Every Discord sign-in is checked with Discord before we trust it, and our Discord secret keys stay on our server and never reach your device. Access to the server is limited to us. We keep only the data listed here.
If a breach puts your data at risk, we'll tell you without delay and, where the law requires, report it to the Information Commissioner's Office.
10. Changes to this policy
When we change this policy we'll update the date at the top. For significant changes, such as when the shop opens, we'll tell you in the game before they take effect.
11. Contact us
whispr.dev, United Kingdom
Email: [email protected]